← Back to Home

1. Information We Collect

We collect only the information necessary to provide and improve our services:

For All Users:

• Basic Account Information: Email address, full name, and password (securely hashed)
• Encrypted Journal Content: Your written thoughts, reflections, and introspective journal entries. This content is protected with end-to-end encryption and cannot be read by SelfAware.
• Exercise and Tracking Data: Information recorded during emotional wellness exercises such as selected emotions, triggers, emotional intensity levels, timestamps, and self-care color selections. This data is stored in standard (non-encrypted) database form in order to enable features such as progress tracking, emotional insights, and visualizations.
• Progress Data: Exercise completion status, streaks, and general usage metrics related to wellness activities.
• Onboarding Analytics: During onboarding, we record whether the flow and its individual steps were started, viewed, or completed; the selected motivation and mood option codes; language changes; locale; mobile platform; app version, when available; timestamps; and a randomly generated temporary onboarding session ID. These events do not include your name, email address, account or profile ID, device ID, advertising ID, journal text, reflection text, or other free-form responses. The temporary session ID is not linked to your account or profile.

3. End-to-End Encryption

SelfAware uses end-to-end encryption (E2EE) to protect your most private written reflections.

What Is End-to-End Encrypted

• Your personal journal entries, thoughts, and introspective reflections
• Written content you store in the journaling features of the app

This content is encrypted directly on your device before being transmitted to our servers.

• Only you possess the encryption keys needed to decrypt this content
• SelfAware cannot read, access, or recover your encrypted journal entries
• Your encryption keys are derived from your password and are never stored on our servers

Data That Is NOT End-to-End Encrypted

To enable core features such as progress tracking, emotional insights, and exercise history, certain structured exercise data is stored in standard database form (not end-to-end encrypted).

• Selected emotions during exercises
• Triggers or situations you record
• Emotional intensity ratings
• Self-care color selections
• Exercise completion timestamps
• Privacy-minimal onboarding events, option codes, locale, platform, app version when available, timestamps, and temporary onboarding session ID

This data is still protected using standard security practices including encrypted connections (HTTPS), secure servers, and strict access controls.

4. How We Use Your Information

General Uses:

• To provide and maintain the SelfAware service
• To enable features like emotion tracking, progress insights, and calendar views
• To understand onboarding completion and drop-off rates and improve the onboarding experience
• To send important service updates and notifications (with your permission)

5. Information Sharing and Third-Party Services

Third-Party Service Providers:

We share limited data only with our essential backend provider:

• Secure backend for data storage (E2EE where specified above + RLS). We do not use a third-party analytics service for onboarding analytics. The app submits these first-party events to a write-only database endpoint; app users cannot read, update, or delete analytics rows through that endpoint.

6. What We DON'T Do

• We do NOT sell your personal data to third parties
• We do NOT use your journal content for advertising
• We do NOT share your encrypted content with anyone
• We do NOT track your activity across other websites or apps

7. Data Storage and Security

We use industry-standard security measures to protect your data:

• All data transmitted over secure HTTPS connections
• Data stored on secure, encrypted servers with row-level security
• Regular security audits and updates
• Access controls and monitoring to prevent unauthorized access

8. Data Retention

• Your data is retained as long as your account is active
• You can delete individual journal entries, exercises, or your entire account at any time
• When you delete your account or data, it is instantly and permanently removed from our systems
• Encrypted content cannot be recovered after deletion
• Onboarding analytics are retained only for as long as reasonably necessary to measure and improve the onboarding funnel. Because the temporary session ID is deliberately not linked to an account or profile, these events cannot normally be located using your account ID and may not be removed automatically when an account is deleted.

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of non-essential communications
• Withdraw consent at any time
• Object to processing based on legitimate interests by contacting us. Some requests concerning onboarding analytics may not be actionable where the data cannot be connected to you.

10. Children's Privacy

SelfAware is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

11. Data Controller (GDPR)

For the purposes of the General Data Protection Regulation (GDPR), the data controller responsible for your personal data is:

If you have any questions about this Privacy Policy or how your data is handled, you may contact us at any time.

12. Legal Basis for Processing (EU GDPR)

We process your personal data only when we have a valid legal basis under the GDPR, including:

• Contract necessity — to provide and maintain the core SelfAware features
• Your consent — for optional communications & notifications
• Legitimate interest — to improve app security, performance, and user experience, including understanding and improving the onboarding funnel. For onboarding analytics, we consider the limited data collected and the absence of account, profile, device, advertising, and free-form text identifiers. You may object to this processing by contacting us.

We do not use your encrypted journal content for advertising or profiling.

13. Cookies and Tracking Technologies

No Cookies or Cross-App Tracking

• The mobile app does not use cookies and does not track your activity across other apps or websites. Our first-party onboarding analytics are limited to interactions within the SelfAware onboarding flow as described above.

14. Sensitive Data Notice

Your journal entries and reflections may contain sensitive personal information, including emotional wellbeing or mental health related content.

Written journal content is protected using end-to-end encryption and cannot be accessed by SelfAware.

However, structured exercise data such as selected emotions, triggers, intensity levels, and self-care color selections is stored in standard database form in order to enable progress tracking and insights within the app.

15. Medical Disclaimer

SelfAware is designed for self-reflection, emotional wellness, and general self-care support.

The app may suggest evidence-based wellness activities such as breathing exercises, grounding techniques, or journaling prompts. However:

• SelfAware does not provide medical or clinical advice
• The app does not diagnose, treat, or prevent any mental health condition
• The content is not a substitute for professional healthcare or therapy

16. Export Control and Sanctions Compliance

SelfAware may be subject to applicable export control and economic sanctions laws, including restrictions related to the use of encryption technologies.

By using this service, you agree that you will not access, download, or distribute the app in any jurisdiction where such use is prohibited by law, including regions subject to international sanctions.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. Your continued use of the app after changes indicates acceptance of the updated policy.

18. Contact Us